Logic Error in Signature Verification for SNS by Stormshield
CVE-2026-113469

7.5HIGH

Key Information:

Vendor

Stormshield

Status
Stormshield Network Security
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113469?

A logic error has been discovered in the signature verification routine within the SNS product of Stormshield. This flaw allows the system to accept unauthenticated dynamic data updates during the Autoupdate process, potentially putting data integrity at risk. Organizations using affected versions of SNS are advised to review their update processes and apply necessary mitigations to secure their systems.

Affected Version(s)

Stormshield Network Security 4.3.0 <= 4.3.44

Stormshield Network Security 4.8.0 <= 4.8.19

Stormshield Network Security 5.0.0 <= 5.0.9

References

https://advisories.stormshield.eu/2026-032/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.